openssl-pkcs12

Create PKCS12 from cert and key

$ openssl pkcs12 -export -out [certificate.p12] -inkey [private.key] -in [certificate.crt]

$ openssl pkcs12 -export -out [cert.p12] -inkey [key.pem] -in [cert.pem] -certfile [ca-chain.pem]

$ openssl pkcs12 -in [certificate.p12] -clcerts -nokeys -out [certificate.crt]

$ openssl pkcs12 -in [certificate.p12] -nocerts -out [private.key]

$ openssl pkcs12 -in [certificate.p12] -out [all.pem] -nodes

openssl pkcs12 [options]

openssl pkcs12 creates and parses PKCS#12 files (.p12, .pfx). These files bundle private keys, certificates, and CA chains into a single encrypted file.
Commonly used for importing/exporting certificates in browsers and applications.

-export

Create PKCS12 file.

Input file.

Output file.

Private key file.

Additional certificates.

Don't output keys.

Don't output certs.

Don't encrypt output.

Friendly name.

PKCS12 passwords can be brute-forced. Use strong passwords. Legacy format uses weak encryption by default.

PKCS#12 is a standard from RSA Laboratories, widely supported for portable certificate storage.

openssl-x509(1), openssl-rsa(1), keytool(1)